- Freeradius-Users - lists.freeradius.org

How to assign default gatway?
by Xiaochen Jing 07 Aug '08

07 Aug '08

Hello all, Is that possible to assign users a default gateway while allocating dynamic IP addresses from IP pool? Thank you

2 1

Does Avenda use freeradius?
by paul smith 07 Aug '08

07 Aug '08

Hi, I've been looking at getting an appliance from a company called Avenda Systems (www.avendasystems.com) Its a RADIUS appliance with a nice GUI, but I think FreeRADIUS offers all the features that it does. Does anyone have any experience of it? Or a comparison between it and FreeRADIUS? Also I think it may be FreeRADIUS underneath, does anyone know if that is the case? thanks, paul

2 5

Howto log wrong-password ( and other attempts ) to radacct ( sql_log ? )
by S Adrian 07 Aug '08

07 Aug '08

Hi again everybody Ok, it seems my freeradius only wants to log access-accept stuff to sql .. but when I login with wrong password .. it doesn't insert it in sql .. anyone can tell what do I need to have in what section please? Thanks in advance, Adrian.

2 1

Freeradius does not assign IP from main_pool
by Xiaochen Jing 07 Aug '08

07 Aug '08

Hello all, I want to use Freeradius to assign IP addresses to clients from main_pool. After all set up (I think), L2tp tunnel is established but user cannot get an IP from Freeradius. From the Reply message, I see no IP is replied to user. Could anyone take a look at the debug and give me a hint? Debug: radiusd: #### Loading Virtual Servers #### server inner-tunnel { modules { Module: Checking authenticate {...} for more modules to load Module: Linked to module rlm_pap Module: Instantiating pap pap { encryption_scheme = "auto" auto_header = no } Module: Linked to module rlm_chap Module: Instantiating chap Module: Linked to module rlm_mschap Module: Instantiating mschap mschap { use_mppe = yes require_encryption = no require_strong = no with_ntdomain_hack = no } Module: Linked to module rlm_unix Module: Instantiating unix unix { radwtmp = "/usr/local/var/log/radius/radwtmp" } Module: Linked to module rlm_eap Module: Instantiating eap eap { default_eap_type = "md5" timer_expire = 60 ignore_unknown_eap_types = no cisco_accounting_username_bug = no } Module: Linked to sub-module rlm_eap_md5 Module: Instantiating eap-md5 Module: Linked to sub-module rlm_eap_leap Module: Instantiating eap-leap Module: Linked to sub-module rlm_eap_gtc Module: Instantiating eap-gtc gtc { challenge = "Password: " auth_type = "PAP" } rlm_eap: Ignoring EAP-Type/tls because we do not have OpenSSL support. rlm_eap: Ignoring EAP-Type/ttls because we do not have OpenSSL support. rlm_eap: Ignoring EAP-Type/peap because we do not have OpenSSL support. Module: Linked to sub-module rlm_eap_mschapv2 Module: Instantiating eap-mschapv2 mschapv2 { with_ntdomain_hack = no } Module: Checking authorize {...} for more modules to load Module: Linked to module rlm_realm Module: Instantiating suffix realm suffix { format = "suffix" delimiter = "@" ignore_default = no ignore_null = no } Module: Linked to module rlm_files Module: Instantiating files files { usersfile = "/usr/local/etc/raddb/users" acctusersfile = "/usr/local/etc/raddb/acct_users" preproxy_usersfile = "/usr/local/etc/raddb/preproxy_users" compat = "no" } [/usr/local/etc/raddb/users]:107 WARNING! Check item "Group" found in reply i tem list for user "testuser". This attribute MUST go on the first line with th e other check items [/usr/local/etc/raddb/users]:107 WARNING! Check item "Pool-Name" found in reply item list for user "testuser". This attribute MUST go on the first line with the other check items Module: Checking session {...} for more modules to load Module: Linked to module rlm_radutmp Module: Instantiating radutmp radutmp { filename = "/usr/local/var/log/radius/radutmp" username = "%{User-Name}" case_sensitive = yes check_with_nas = yes perm = 384 callerid = yes } Module: Checking post-proxy {...} for more modules to load Module: Checking post-auth {...} for more modules to load Module: Linked to module rlm_attr_filter Module: Instantiating attr_filter.access_reject attr_filter attr_filter.access_reject { attrsfile = "/usr/local/etc/raddb/attrs.access_reject" key = "%{User-Name}" } } } server { modules { Module: Checking authenticate {...} for more modules to load Module: Checking authorize {...} for more modules to load Module: Linked to module rlm_preprocess Module: Instantiating preprocess preprocess { huntgroups = "/usr/local/etc/raddb/huntgroups" hints = "/usr/local/etc/raddb/hints" with_ascend_hack = no ascend_channels_per_line = 23 with_ntdomain_hack = no with_specialix_jetstream_hack = no with_cisco_vsa_hack = no with_alvarion_vsa_hack = no } Module: Checking preacct {...} for more modules to load Module: Linked to module rlm_acct_unique Module: Instantiating acct_unique acct_unique { key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NA S-Port" } Module: Checking accounting {...} for more modules to load Module: Linked to module rlm_detail Module: Instantiating detail detail { detailfile = "/usr/local/var/log/radius/radacct/%{Client-IP-Address}/det ail-%Y%m%d" header = "%t" detailperm = 384 dirperm = 493 locking = no log_packet_header = no } Module: Linked to module rlm_ippool Module: Instantiating main_pool ippool main_pool { session-db = "/usr/local/etc/raddb/db.ippool" ip-index = "/usr/local/etc/raddb/db.ipindex" key = "%{NAS-IP-Address} %{NAS-Port}" range-start = 192.168.1.1 range-stop = 192.168.3.254 netmask = 255.255.255.0 cache-size = 800 override = yes maximum-timeout = 0 } Module: Instantiating attr_filter.accounting_response attr_filter attr_filter.accounting_response { attrsfile = "/usr/local/etc/raddb/attrs.accounting_response" key = "%{User-Name}" } Module: Checking session {...} for more modules to load Module: Checking post-proxy {...} for more modules to load Module: Checking post-auth {...} for more modules to load } } radiusd: #### Opening IP addresses and Ports #### listen { type = "auth" ipaddr = * port = 0 } listen { type = "acct" ipaddr = * port = 0 } Listening on authentication address * port 1812 Listening on accounting address * port 1813 Ready to process requests. Here is the process: rad_recv: Access-Request packet from host 127.0.0.1 port 32915, id=0, length=145 User-Name = "testuser" User-Password = "testing" NAS-Port = 1 Service-Type = Framed-User Framed-Protocol = PPP Calling-Station-Id = "atm 9/0.438:13.172#184577265#atm xyz#speed:UBR#ppp oe 00:1c:23:b6:d3:45#" NAS-IP-Address = 0.0.0.0 +- entering group authorize ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop rlm_realm: No '@' in User-Name = "testuser", looking up realm NULL rlm_realm: No such realm "NULL" ++[suffix] returns noop rlm_eap: No EAP-Message, not doing EAP ++[eap] returns noop ++[unix] returns notfound users: Matched entry testuser at line 107 ++[files] returns ok ++[expiration] returns noop ++[logintime] returns noop ++[pap] returns updated rad_check_password: Found Auth-Type auth: type "PAP" +- entering group PAP rlm_pap: login attempt with password "testing" rlm_pap: Using clear text password "testing" rlm_pap: User authenticated successfully ++[pap] returns ok Login OK: [testuser/testing] (from client localhost port 1 cli atm 9/0.438:13.17 2#184577265#atm xyz#speed:UBR#pppoe 00:1c:23:b6:d3:45#) +- entering group post-auth rlm_ippool: Could not find Pool-Name attribute. ++[main_pool] returns noop Sending Access-Accept of id 0 to 127.0.0.1 port 32915 Service-Type == Framed-User Framed-Protocol == PPP Finished request 0. Going to the next request Waking up in 0.9 seconds. Waking up in 3.9 seconds. Cleaning up request 0 ID 0 with timestamp +283 Ready to process requests.

2 3

Device authentication and User+Device authentication
by Cristian Novac 07 Aug '08

07 Aug '08

Hi all, Could someone tell me what has to be configured to be able to do Device authentication and User+Device authentication. Thank you! Cristian NOVAC

2 11

Problem when using custom attributes for radius extra parameter
by Krunal Patel 07 Aug '08

07 Aug '08

I'm trying to configure openser & freeradius with AAA. I'm using custom mysql tables for authentication & accounting. I've modified queries in sql.conf in raddb folder. Authentication works fine. I've added additional fields in radius_extra parameter of acc module. I've added those parameters in dictionaries of radiusclient-ng & freeradius. But I get blank values for custom fields. Any idea what can be wrong? *openser.cfg* modparam("acc", "radius_extra","User-Name=$fU; Dialstatus=$avp(s:dialstatus);User-Rate=$avp(i:2016);User-Duration=$avp(i:2016);User-Clid=$fU;User_ClidName=$avp(s:callerid);User_Dst_Name=$avp(s:2014);User_Dst_Code=$avp(i:2015);User_Account_Id=$fU;Lcr_Rate=$avp(i:2030);Lcr_Duration=$avp(i:2016);Lcrtrunk_Id=$avp(i:2027);Lcr_Dst_Name=$avp(s:2028);Lcr_Dst_Code=$avp(i:2029);Real_Duration=$avp(i:2016)") *dictionary.openser* ATTRIBUTE Dialstatus 1073 string ATTRIBUTE User-Rate 1074 string ATTRIBUTE User-Duration 1075 string ATTRIBUTE User-Channel 1076 string ATTRIBUTE User-Clid 1077 string ATTRIBUTE User_ClidName 1080 string ATTRIBUTE User_Dst_Name 1081 string ATTRIBUTE User_Dst_Code 1082 string ATTRIBUTE User_Account_Id 1083 string ATTRIBUTE Lcr_Rate 1084 string ATTRIBUTE Lcr_Duration 1085 string ATTRIBUTE Lcrtrunk_Id 1086 string ATTRIBUTE Lcr_Dst_Name 1087 string ATTRIBUTE Lcr_Dst_Code 1088 string ATTRIBUTE DialedTime 1089 string ATTRIBUTE Real_Duration 1090 string ATTRIBUTE Startleg 1091 string ATTRIBUTE Stopleg 1092 string *dictionary.radius* ATTRIBUTE Dialstatus 1073 string ATTRIBUTE User-Rate 1074 string ATTRIBUTE User-Duration 1075 string ATTRIBUTE User-Channel 1076 string ATTRIBUTE User-Clid 1077 string ATTRIBUTE User_ClidName 1080 string ATTRIBUTE User_Dst_Name 1081 string ATTRIBUTE User_Dst_Code 1082 string ATTRIBUTE User_Account_Id 1083 string ATTRIBUTE Lcr_Rate 1084 string ATTRIBUTE Lcr_Duration 1085 string ATTRIBUTE Lcrtrunk_Id 1086 string ATTRIBUTE Lcr_Dst_Name 1087 string ATTRIBUTE Lcr_Dst_Code 1088 string ATTRIBUTE DialedTime 1089 string ATTRIBUTE Real_Duration 1090 string ATTRIBUTE Startleg 1091 string ATTRIBUTE Stopleg 1092 string Thanks in advance -- Krunal Patel

3 3

Scour.com invite from yawar hadi noshahi
by yawar hadi noshahi 07 Aug '08

07 Aug '08

Hey, Did you hear about Scour? It is the next gen search engine with Google/Yahoo/MSN results and user comments all on one page. Best of all we get paid for using it by earning points with every search, comment and vote. The points are redeemable for Visa gift cards! It's like earning credit card or airline points just for searching! Hit the link below to join for free and we will both get points! http://scour.com/invite/yawar/ I know you'll like it! - yawar hadi noshahi

1 0

Re: PEAP mschapv2 using xp native supplicant
by Ryan Setiawan H 07 Aug '08

07 Aug '08

2 1

MAC authenticating with mySQL database
by Kjell Bruheim 07 Aug '08

07 Aug '08

Hi all! I have been trying to read up on MAC authentication and implementing that into a sql database. The MAC authentication with a userfile was no problem. But i hit the wall when i wanted to use a database instead of text file. Is there any good HOWTO's out there on this one? The configuration of the intended network. Radius server--->wifi-routers with MAC auth--->clients The reason for this MAC authentication is for engineers to have access to internet on sites we have equipment on. But not the users of the equipment. And the reason for wanting to implement sql database to store MAC addresses in, is to make it easier for admins to edit and that we want to implement other software to also use the info for our engineers. Cheers. -- Kjell Christian Bruheim Helpdesk Supportingit

3 5

Installation problem
by Frederick William Borges Pohl 07 Aug '08

07 Aug '08

Hello, I am rather new to freeradius and I´m having trouble running the server after installation I installed using: ./configure --sysconfdir=/etc Make Make install When I try running with radiusd I get the following error: /usr/local/sbin/radiusd: error while loading shared libraries: libfreeradius-radius-2.0.5.so: cannot open shared object file: No such file or directory The libfreeradius-radius-2.0.5.so file is located at the following directory: ns1:/usr/local # find / -name libfreeradius-radius-2.0.5.so /usr/local/lib/libfreeradius-radius-2.0.5.so This is my radiusd.conf prefix = /usr/local exec_prefix = ${prefix} sysconfdir = /etc localstatedir = /var sbindir = ${exec_prefix}/sbin logdir = ${localstatedir}/log/radius raddbdir = ${sysconfdir}/raddb radacctdir = ${logdir}/radacct confdir = ${raddbdir} run_dir = ${prefix}/${localstatedir}/run/radiusd db_dir = /usr/local/lib/ libdir = ${exec_prefix}/lib >From what is configured above, the libdir should be /usr/local/lib which is exactly where the file is located. Is there something I am missing? Thank you, Frederick Pohl Esta mensagem, incluindo seus anexos, pode conter informações privilegiadas e/ou de caráter confidencial, não podendo ser retransmitida sem autorização do remetente. Se você não é o destinatário ou pessoa autorizada a recebê-la, informamos que o seu uso, divulgação, cópia ou arquivamento são proibidos. Portanto, se você recebeu esta mensagem por engano, por favor, nos informe respondendo imediatamente a este e-mail e em seguida apague-a.

3 8